CVE-2016-9450 | BDVDB-2026-79431 Detail

Description#

The user password reset form in Drupal 8.x before 8.2.3 allows remote attackers to conduct cache poisoning attacks by leveraging failure to specify a correct cache context.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/94367
https://www.drupal.org/SA-CORE-2016-005

Exploit#

No public exploit known

History#

Version 12016-11-25Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.